setup-disk: global failure if luks passphrase missmatch
The simple solution seems to add this cryptsetup option:
--tries, -T
How often the input of the passphrase shall be retried. This
option is relevant every time a passphrase is asked, for example
for open, luksFormat or luksAddKey. The default is 3 tries.